Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We鈥檒l occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add tls.client_metadata_key support to vector source (and maybe http_server as well) #20477

Open
vbr-cts opened this issue May 10, 2024 · 0 comments
Labels
source: http_server Anything `http_server` source related source: vector Anything `vector` source related type: feature A value-adding code addition that introduce new functionality.

Comments

@vbr-cts
Copy link

vbr-cts commented May 10, 2024

A note for the community

  • Please vote on this issue by adding a 馃憤 reaction to the original issue to help the community and maintainers prioritize this request
  • If you are interested in working on this issue or have submitted a pull request, please leave a comment

Use Cases

When sending logs between vector instances, it is currently possible to use TLS mutual authentication. The client and server will verify that they each have valid certificates. However, no information about this authentication is available for routing, remaping, or lua processing.

Having that information would mean we could then do authorization, or authenticate and track message origin.

Attempted Solutions

The socket source supports a tls.client_metadata_key option, that lets me do exactly what I need. However I then lose end to end acknowledgements.

Proposal

Add support for the tls.client_metadata_key option to the vector source. Ideally, it would also be added to the http_server source as well.

References

No response

Version

vector 0.38.0 (x86_64-unknown-linux-gnu ea0ec6f 2024-05-07 14:34:39.794027186)

@vbr-cts vbr-cts added the type: feature A value-adding code addition that introduce new functionality. label May 10, 2024
@jszwedko jszwedko added source: vector Anything `vector` source related source: http_server Anything `http_server` source related labels May 10, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
source: http_server Anything `http_server` source related source: vector Anything `vector` source related type: feature A value-adding code addition that introduce new functionality.
Projects
None yet
Development

No branches or pull requests

2 participants